CSO US First Look
The day's top cybersecurity news and in-depth coverage
January 13, 2025
CISOs embrace rise in prominence â with broader business authority
Security execs are increasingly adding high-value responsibilities, expanding their skillsets, gaining deeper understanding of their business, and becoming more well-rounded leaders.
Read more
SEC rule confusion continues to put CISOs in a bind a year after a major revision
Despite a spate of recent actions exemplifying how the US Securities and Exchange Commission is enforcing disclosure and compliance, companies are still unsure how and what to report.
UN agencyâs job application database breached, 42,000 records stolen
The agency, which supports the operation of international civil aviation, said air traffic is safe, but one analyst raised doubts about that.
DNA sequencer vulnerabilities signal firmware issues across medical device industry
Eclypsium security researchers have uncovered UEFI vulnerabilities in the Illumina iSeq 100 DNA sequencer, but the broader issue involves the device development process at large.
How CISOs can forge the best relationships for cybersecurity investment
Securing a cybersecurity investment isnât just about crunching numbers â itâs about fostering cross-functional relationships. For CISOs, engaging key stakeholders will help build support to secure critical funding.
The biggest data breach fines, penalties, and settlements so far
Hacks and data thefts, enabled by weak security, cover-ups or avoidable mistakes have cost these companies a total of nearly $4.4 billion and counting.
Critical Mitel, Oracle flaws find active exploitation, CISA urges patching
CISA added the flaws to its known vulnerability catalog, recommending swift patching pursuant to Binding Operational Directive (BOD) 22-01.